Delete your Ally account

Under Article 17 of the UK GDPR you may request full erasure of your personal data. The Ally cabinet exposes this as a single-click action from account settings — no support ticket, no verification form, no waiting queue.

What happens when you click

1. You receive a confirmation email at your registered address. Click the link to confirm — the whole thing is one email, one click. This defends against a stolen session hitting the button.
2. Your cabinet is immediately marked as pending deletion. All active sign-in sessions on every device are revoked; the next request to any cabinet URL redirects to sign-in.
3. Upcoming sessions are cancelled from your side; your mentor is notified with a neutral system message ("client's cabinet closed") and is not told the reason.
4. Within 30 days: personal notes, homework items, message threads, uploads and account metadata are hard-deleted from production and backups reaching end-of-life.
5. Shared session notes are anonymised — your name is replaced with a random handle; the mentor keeps a working copy for their professional records under their own GDPR obligations.
6. Billing records that we are legally required to retain (invoices, VAT receipts) are kept for six years under HMRC rules, with all identifying fields except your legal name minimised.

What is not deleted

• VAT invoices and payment ledgers, per HMRC retention requirements (six years).
• Anonymised aggregate metrics (session counts by month) with no path back to you.
• Support emails you sent to the desk, held for 24 months for audit; you may request deletion of these separately via dpo@allyhub.org.

Confirm deletion

If you need help evaluating this decision (for example, exporting your notes first), reach the DPO at dpo@allyhub.org. See also our UK privacy notice and Data Processing Agreement.